- Image garbage collection no longer fails for images with only one tag but more than one repository associated. ([#70647](https://github.com/kubernetes/kubernetes/pull/70647), [@corvus-ch](https://github.com/corvus-ch))

        assertTrue(response.getResults()[1] instanceof FileBothDirectoryInfo);
    }

    @Test
    @DisplayName("Test readBytesWireFormat with zero buffer length returns one empty result")
    void testReadBytesWireFormatZeroBufferLength() throws Exception {
        response = new Smb2QueryDirectoryResponse(mockConfig, Smb2QueryDirectoryRequest.FILE_BOTH_DIRECTORY_INFO);

## Trusted Certificates Settings for MinIO. Ref: https://docs.min.io/community/minio-object-store/operations/network-encryption.html#third-party-certificate-authorities
## Bundle multiple trusted certificates into one secret and pass that here. Ref: https://github.com/minio/minio/tree/master/docs/tls/kubernetes#2-create-kubernetes-secret
## When using self-signed certificates, remember to include MinIO's own certificate in the bundle with key public.crt.

*   Metrics are added for monitoring admission plugins, including the new dynamic (webhook-based) ones. ([#55183](https://github.com/kubernetes/kubernetes/pull/55183),[ @jpbetz](https://github.com/jpbetz))

<= 1.32 proceeded to schedule pods onto nodes with no devices by not allocating any devices for those pods. Kubernetes 1.33 changes that to only picking nodes which have at least one device. Users who want the "proceed with scheduling also without devices" semantic can use the upcoming prioritized list feature with one sub-request for "all" devices and a second alternative with "count: 0". ([#129560](https://github.com/kubernetes/kubernetes/pull/129560), [@bart0sh](https://github.com/bart0sh)) [SIG...

    @Test
    public void test_getParentGroup_oneBeforeDepthLimit() {
        EntraIdAuthenticator authenticator = new EntraIdAuthenticator();
        authenticator.setMaxGroupDepth(5);

        // Test with depth one before the limit - should attempt to process
        // Will fail due to null user, but verifies depth check passes
        try {
            authenticator.getParentGroup(null, "test-id", 4);

    // The choice of the size() method to call here is arbitrary.  We assume that if any of the Set
    // methods executes the validation check, they all will, and thus we only need to test one of
    // them to ensure that the validation check happens and has the expected behavior.
    assertNodeRemovedFromGraphErrorMessage(
        assertThrows(IllegalStateException.class, n1AdjacentNodes::size));

      } catch (Throwable t) {
        logger.log(Level.SEVERE, "Error cleaning up after reference.", t);
      }
    }
  }

  /**
   * Iterates through the given loaders until it finds one that will load Finalizer.
   *
   * @return a {@link Class} for {@link Finalizer} or {@code null} if none of the loaders load it
   */
  private static @Nullable Class<?> loadFinalizer(FinalizerLoader... loaders) {

        testBlock = new TestAndXServerMessageBlock(mockConfig, (byte) 0x25, andxBlock) {
            @Override
            protected int getBatchLimit(Configuration cfg, byte cmd) {
                return 1; // Allow one batched message
            }
        };

        byte[] buffer = new byte[1024];
        int length = testBlock.encode(buffer, 0);

        assertTrue(length > 0);

        NameServicePacket.writeInt2(NameServicePacket.IN, src, 4); // recordClass
        NameServicePacket.writeInt4(100, src, 6); // ttl
        NameServicePacket.writeInt2(6, src, 10); // rDataLength (for one NbtAddress)

        packet.questionName = mockQuestionName; // Ensure questionName is set

        int read = packet.readResourceRecordWireFormat(src, 0);